My WZR-HP-G450H is still running, what do you need? I'm running on build 30357 and for some reason the SQUASHFS errors that broke the Web-Service were gone once I granted a weekend break to my router.So I'm able to access the flash-ROM of my router:

I've been able to get strace for build 30357 to find out more about where openssl gets stuck. For build 30357, you must take care to take newer ipkg-Packages of the tools since that built is based on the musl-version of libc, the older µClibc based packages won't work any more (see also https://news.ycombinator.com/item?id=9941076).

And then it's stuck, no further progress and the process stays in state 'R' with 100% CPU. That meansthat for example you won't be able to utilize the Freeradius Service as the bootstrap strip of that servicewill have to call openssl several times to generate the certificate and the Diffie-Hellman parameters and such.

Yes, it really seems that the libssl.so from build 30357 is broken. I was able to work around this and the freeradius service now seems to run again on my WZR-HP-G450H also with build 30357. At first, I downloaded the openssl-util and libopenssl ipkgs from the openwrt project:

I think the openssl-util ipkg is not even needed, also not overloading the PATH variable ... but this way libssl.so from the ipkg is used and that .so doesn't seem to hang but the bootstrap completes cleanly and you have a fresh certificate with everything.

And next, the Radius-Daemon with the alternative libssl must be started:

Unfortunately, this must happen manually in an SSH-Login session. So it'll be painful to configure the service as you'll have to use the web-interface andstart the service manually after every config change.But at least it seems to work and I run a firmware that is not vulnerable to the dnsmasq-issue any more.

The next thing to investigate in is the OpenVPN-Service, that daemon is linked to libssl.so as well.